AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
81192f92f52f5e295996b3b1684d0438bbcded9266565861873a876d7e1ecaea.dll
Resource
win7-20240729-en
Target
81192f92f52f5e295996b3b1684d0438bbcded9266565861873a876d7e1ecaea
Size
437KB
MD5
5627250c705ca4851d0e7ad43215e234
SHA1
01b1f79e4ee558f006ea6c2d4243158c3e7d51b0
SHA256
81192f92f52f5e295996b3b1684d0438bbcded9266565861873a876d7e1ecaea
SHA512
19b2163568026a3430b3ea8107829d7572a81a4b9209e22f5d006932a5223ef17ce313b8a7af4b44e0e2a49eb4f27777338a596397c0169ba2f8597cfc7f4a88
SSDEEP
6144:bas0ZLc/IJvCklIqA8mvHwgnHJp9OWqw7zsK0bencTpX4KtjY5Jt/lt0zwzOu6W4:gBFJqk2q1g5ppemr0bAKoNfnQCSWpoSi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
81192f92f52f5e295996b3b1684d0438bbcded9266565861873a876d7e1ecaea |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ